$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: vh6TPtme3MdVj97z2z/ty4q7Ul8AUKsDgCuM5gf81pc= Subject key identifier: 07:0B:83:20:B1:1D:79:12:EA:16:A4:8D:92:93:84:BC:62:07:3D:D7 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0AAA Signing time: Mon 12 May 2025 19:24:09 +0000 Manifest this update: Mon 12 May 2025 19:24:09 +0000 Manifest next update: Mon 19 May 2025 19:24:09 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: SHfJwCdAco/Wbl76Ec8rsK98JhbJgPf54W5xoLblWus=) 2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 3+4YIvZgcCdVrPM39eq8U0b37BVdz2kxEm0TdnodkbE=) 3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: z2Amob3XsDPHZrT5Wf5AplgGB0ayushklt2PBfRRMGk=) 4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b8sKlJgxC+LgU3RKdElF+rtjQy5KxRCgzXpaFbzf9q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: May 12 19:24:09 2025 GMT Not After : May 19 19:24:09 2025 GMT Subject: CN=68224ad9-5c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6f:8b:07:42:34:4e:a1:f5:0c:cf:2e:91:c2: c4:15:b3:81:ed:bc:e3:d5:fd:7e:f0:c7:c3:28:cd: 30:ad:3f:8d:86:ea:9a:1f:b8:11:cf:96:23:36:93: 93:75:c4:58:e5:7b:3d:b8:fb:e1:aa:d4:60:03:f1: dc:8b:79:d9:d6:47:83:86:44:20:15:4d:bd:aa:e0: ec:11:a7:df:a0:15:a8:8b:14:e5:88:c2:ec:b9:ec: 6f:51:17:a5:dc:fa:fb:de:ee:e3:4e:a9:71:37:79: 45:2e:f4:c8:8e:2d:a1:9a:47:23:1f:ad:43:a7:b8: 8a:ae:e7:97:70:93:dc:bc:cd:72:49:9e:1d:08:13: 88:17:10:ed:d7:30:d4:b7:de:43:32:02:2b:9e:2a: b8:6e:2a:e1:ab:3c:b0:c8:d7:35:a1:64:03:5d:50: ef:3c:1f:53:44:d8:a4:be:0a:e4:4e:fd:9c:a8:2e: 21:32:04:1f:07:fc:05:75:ab:19:e7:18:85:b1:8a: 9a:80:0d:fc:c9:1c:5c:f5:97:3e:81:fa:7b:cf:91: e5:b1:e4:62:72:ee:51:69:64:0e:86:f8:c0:3e:84: 08:0a:8a:fd:fb:cc:4b:64:5a:cd:02:9a:22:e8:fe: 68:e0:cb:80:de:83:69:72:fd:5f:67:d8:2e:30:e8: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0B:83:20:B1:1D:79:12:EA:16:A4:8D:92:93:84:BC:62:07:3D:D7 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:99:f5:5a:9b:1b:06:b6:74:b4:15:03:b2:05:74:dd:47: 06:dd:d4:19:dd:a7:49:9b:85:59:37:06:02:3c:da:37:b7:c6: c4:4b:cc:86:1f:dd:46:75:36:eb:49:62:b5:bb:85:e4:f0:0a: 74:44:e4:78:9e:f6:83:d3:17:be:1f:28:a8:55:c1:46:39:5b: f1:12:2e:91:55:01:8b:c7:34:48:2e:5b:75:7f:55:ca:7c:57: 38:2b:48:d2:19:05:36:fa:cb:7b:3c:3c:bf:75:9c:c6:d4:63: 22:ce:18:ef:16:20:70:c4:25:53:57:0b:3a:d4:24:21:d4:b4: a2:24:92:18:07:6b:53:9f:5a:a6:b0:64:ca:fc:59:88:14:31: 6e:12:f6:e1:f1:47:cf:86:b5:b5:5d:2a:ee:fd:d0:a1:e0:5c: 1b:6d:48:5e:11:ed:fa:2f:86:bb:6d:40:a2:c9:2d:60:f9:9a: 3f:60:a3:c3:04:0e:ae:da:21:ca:6d:ad:1a:ff:4a:3c:7b:5e: 0b:fa:0c:8d:58:4e:31:cc:07:0a:0a:61:09:aa:6a:e8:0e:43: 69:60:d0:65:6f:88:ac:ce:a0:d5:40:5c:77:ed:93:8f:4c:14: db:ff:a5:d7:f8:8a:4b:57:0a:12:cc:4e:30:5f:f4:e1:bd:68: 43:c8:1e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjUwNTEyMTkyNDA5WhcNMjUwNTE5MTkyNDA5WjAYMRYwFAYD VQQDEw02ODIyNGFkOS01YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72+LB0I0TqH1DM8ukcLEFbOB7bzj1f1+8MfDKM0wrT+NhuqaH7gRz5YjNpOT dcRY5Xs9uPvhqtRgA/Hci3nZ1keDhkQgFU29quDsEaffoBWoixTliMLsuexvURel 3Pr73u7jTqlxN3lFLvTIji2hmkcjH61Dp7iKrueXcJPcvM1ySZ4dCBOIFxDt1zDU t95DMgIrniq4birhqzywyNc1oWQDXVDvPB9TRNikvgrkTv2cqC4hMgQfB/wFdasZ 5xiFsYqagA38yRxc9Zc+gfp7z5HlseRicu5RaWQOhvjAPoQICor9+8xLZFrNApoi 6P5o4MuA3oNpcv1fZ9guMOjXIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcLgyCx HXkS6hakjZKThLxiBz3XMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8Jn1WpsbBrZ0tBUDsgV03UcG3dQZ3adJm4VZNwYCPNo3t8bES8yG H91GdTbrSWK1u4Xk8Ap0ROR4nvaD0xe+HyioVcFGOVvxEi6RVQGLxzRILlt1f1XK fFc4K0jSGQU2+st7PDy/dZzG1GMizhjvFiBwxCVTVws61CQh1LSiJJIYB2tTn1qm sGTK/FmIFDFuEvbh8UfPhrW1XSru/dCh4FwbbUheEe36L4a7bUCiyS1g+Zo/YKPD BA6u2iHKba0a/0o8e14L+gyNWE4xzAcKCmEJqmroDkNpYNBlb4iszqDVQFx37ZOP TBTb/6XX+IpLVwoSzE4wX/ThvWhDyB7j -----END CERTIFICATE-----Generated at Wed May 14 15:28:23 2025 by rpki-client